VulnerabilityPublished 25 Jun 2024Updated 20 Jul 2026

BitPay-Net (NuGet) · Malicious Code

Affects BitPay-NetSource GCVE Database

Severity

High

Rated by Threat Radar

Data as of 20 Jul 2026, 20:43 UTC

What to do

Affected software

Product	Affected	Fixed in
NuGetBitPay-Net`pkg:nuget/BitPay-Net`Other threats	Affected =5.0.1	Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Review dependencies and replace or remove this package from projects. Monitor vendor or repository advisories for updates or official fixes.

Description

The BitPay-Net package version 5.0.1 on NuGet has been identified as containing malicious code. This is a supply chain threat where the package itself is malicious. No CVSS score or detailed technical exploit information is provided. There is no indication of known exploits in the wild or available patches.

Impact

Use of BitPay-Net version 5.0.1 may result in execution of malicious code embedded within the package. This poses a risk to the integrity and security of software projects depending on this package. No specific impact details or exploitation reports are available.

Summary

BitPay-Net version 5.0.1 on the NuGet ecosystem is flagged as a malicious package per the OpenSSF malicious packages database. The package is identified as containing malicious code, representing a supply chain compromise risk. No further technical details or exploit mechanisms are described in the source data.

References

github.com/advisories/GHSA-wqc8-629v-c2wh (opens in a new tab)

Community reviews

Loading reviews…

What to do

Affected software

Description

AI analysisMachine-generated, updated 20 Jul 2026, 20:43 UTC

Technical details

References

Community reviews